Lucene search
+L

3487 matches found

OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2015:0259-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.97755EPSS
SaveExploits26References22
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2015:0259-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.97755EPSS
SaveExploits26References12
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2015:1173-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.97755EPSS
SaveExploits26References12
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.25 views

SUSE: Security Advisory (SUSE-SU-2014:1686-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.78717EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/06/08 1:15 p.m.3 views

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

7.4CVSS7.1AI score0.00522EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2021/06/08 1:15 p.m.34 views

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

7.4CVSS7.1AI score0.00522EPSS
SaveExploits0References4
OSV
OSV
added 2021/06/08 1:15 p.m.17 views

UBUNTU-CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

7.4CVSS5.8AI score0.00522EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/06/08 12:7 p.m.86 views

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

7.4CVSS7.5AI score0.00522EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2021/06/08 12:7 p.m.705 views

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

7.4CVSS7.4AI score0.00522EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/05/13 12:0 a.m.9 views

nippon-antenna RFNTPS 操作系统命令注入漏洞

The nippon-antenna RFNTPS is an application system from the Japanese company nippon-antenna. A ground receiving NTP server. RFNTPS suffers from an operating system command injection vulnerability. The vulnerability, which arises from improper handling of input validation by the program, could all...

7.7CVSS7.7AI score0.0044EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/05/03 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2021-1821)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6AI score0.03939EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/04/30 12:0 a.m.52 views

EulerOS 2.0 SP3 : wireshark (EulerOS-SA-2021-1859)

According to the versions of the wireshark packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the SIGCOMP dissector could crash. This was addressed in epan/dissectors/packet-sigcomp.c by...

7.8CVSS6.9AI score0.05803EPSS
SaveExploits8References14
Tenable Nessus
Tenable Nessus
added 2021/04/30 12:0 a.m.29 views

EulerOS 2.0 SP3 : ntp (EulerOS-SA-2021-1821)

According to the version of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast...

4.3CVSS6.2AI score0.03939EPSS
SaveExploits1References2
NVD
NVD
added 2021/04/28 10:15 a.m.13 views

CVE-2021-30166

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

9CVSS0.03786EPSS
SaveExploits0References4
OSV
OSV
added 2021/04/28 10:15 a.m.7 views

CVE-2021-30166

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

7.2CVSS6AI score0.03786EPSS
SaveExploits0References4
Prion
Prion
added 2021/04/28 10:15 a.m.24 views

Command injection

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

9CVSS7.6AI score0.03786EPSS
SaveExploits0References4Affected Software41
Cvelist
Cvelist
added 2021/04/28 9:30 a.m.20 views

CVE-2021-30166 MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Command Injection

The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission...

7.2CVSS7.8AI score0.03786EPSS
SaveExploits0References4
CVE
CVE
added 2021/04/28 9:30 a.m.45 views

CVE-2021-30166

CVE-2021-30166 affects Meri t Lilin IP cameras (MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 series). The root cause is the NTP Server configuration function not being verified with special parameters, enabling a remote attacker with privileged access to perform a command injection and execute arbitrary ...

9CVSS7.6AI score0.03786EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2021/04/28 12:0 a.m.8 views

Vivotek VIVOTEK IP Camera 操作系统命令注入漏洞

Vivotek VIVOTEK IP Camera is an IP camera from Vivotek, Taiwan, China. The IP camera device suffers from an operating system command injection vulnerability, which originates from the NTP Server configuration not being verified with special parameters. This vulnerability can be exploited by a...

9CVSS7.7AI score0.03786EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2021/04/22 7:36 p.m.31 views

CVE-2021-0227 Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

7.5CVSS7.8AI score0.01314EPSS
SaveExploits0References1
Rows per page
Query Builder